6.12.105-rc1 review

Greg Kroah-Hartman dri-devel linux-cifs linux-patches lkml stable 1 version Aug 20 Applied

Status from this message: Queued for 7.1, 6.18, 6.12, 6.6, 6.1, 5.15 and 5.10, thanks. Used

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Aug 20220 patches 24 repliesApplied

Patches in v1 Applied

#	Subject and files	Size	Replies
1/220	block: stop the timeout timer when releasing a never added disk`block/genhd.c`	+8 -4	0 replies
2/220	bpf: Fix linked reg delta tracking when src_reg == dst_reg`kernel/bpf/verifier.c`	+2 -1	0 replies
3/220	bpf: Clear delta when clearing reg id for non-{add,sub} ops`kernel/bpf/verifier.c`	+25 ~~-23~~	0 replies
4/220	selftests/bpf: Add tests for delta tracking when src_reg == dst_reg`tools/testing/selftests/bpf/progs/verifier_linked_scalars.c`	+57 -0	0 replies
5/220	selftests/bpf: Add tests for stale delta leaking through id reassignment`tools/testing/selftests/bpf/progs/verifier_linked_scalars.c`	+55 -0	0 replies
6/220	f2fs: fix UAF issue in f2fs_merge_page_bio()`fs/f2fs/data.c`	+1 -1	0 replies
7/220	mtd: ubi: skip programming unused bits in ubi headers`drivers/mtd/ubi/io.c`	+10 -0	0 replies
8/220	ubi: fastmap: fix ubi->fm memory leak`drivers/mtd/ubi/attach.c` `drivers/mtd/ubi/fastmap-wl.c` `drivers/mtd/ubi/ubi.h`	+16 -8	0 replies
9/220	mm/damon/ops-common: putback folios on invalid migrate nid`mm/damon/paddr.c`	+8 -1	0 replies
10/220	mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}`mm/damon/paddr.c`	+6 -0	0 replies
11/220	igc: fix netdev not re-attached after resume if interface is down`drivers/net/ethernet/intel/igc/igc_main.c`	+5 -3	0 replies
12/220	ipvs: separate destination availability state`include/net/ip_vs.h` `include/uapi/linux/ip_vs.h` `net/netfilter/ipvs/ip_vs_conn.c` +5 more	+21 ~~-20~~	0 replies
13/220	net: mana: Fix EQ leak in mana_remove on NULL port`drivers/net/ethernet/microsoft/mana/mana_en.c`	+2 -2	2 replies
14/220	crypto: ccp: Add external API interface for PSP module initialization`drivers/crypto/ccp/sp-dev.c` `include/linux/psp-sev.h`	+23 -0	0 replies
15/220	KVM: SVM: Ensure PSP module is initialized if KVM module is built-in`arch/x86/kvm/svm/sev.c`	+10 -0	0 replies
16/220	selinux: require every boolean value to be defined`security/selinux/ss/policydb.c`	+19 -0	2 replies
17/220	selinux: reject a class permission count below its inherited common`security/selinux/ss/policydb.c`	+12 -0	0 replies
18/220	selinux: do not cancel a policy conversion that never started`security/selinux/ss/services.c`	+3 -1	0 replies
19/220	selinux: reject an unclaimed class value in security_get_classes()`security/selinux/ss/services.c`	+19 -5	0 replies
20/220	selftests: mptcp: join: mark tests with data corruption as failed`tools/testing/selftests/net/mptcp/mptcp_join.sh`	+2 -2	0 replies
21/220	mptcp: avoid combining some incoming suboptions`net/mptcp/options.c` `net/mptcp/protocol.h`	+59 -1	0 replies
22/220	mptcp: options: reset DSS fields in case of unexpected size`net/mptcp/options.c`	+7 -1	0 replies
23/220	mptcp: fastopen: only mark MPTFO subflows with SYN data`net/mptcp/fastopen.c`	+4 -3	0 replies
24/220	s390/qeth: validate user buffer length in SNMP and ARP query ioctls`drivers/s390/net/qeth_core_main.c` `drivers/s390/net/qeth_l3_main.c`	+8 -0	0 replies
25/220	ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()`sound/soc/sof/sof-audio.c`	+4 -5	0 replies
26/220	ASoC: cs4265: sort the register default table`sound/soc/codecs/cs4265.c`	+2 -2	0 replies
27/220	ASoC: cs35l45: sort the register default table`sound/soc/codecs/cs35l45-tables.c`	+16 ~~-16~~	0 replies
28/220	ASoC: cs35l41: sort the register default table`sound/soc/codecs/cs35l41-lib.c`	+1 -1	0 replies
29/220	ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses`sound/soc/codecs/lpass-wsa-macro.c`	+4 -4	0 replies
30/220	fbdev: core: Fix pointer desynchronization in fb_io_read()`drivers/video/fbdev/core/fb_io_fops.c`	+8 -0	0 replies
31/220	drm/panthor: skip zero-sized firmware sections`drivers/gpu/drm/panthor/panthor_fw.c`	+3 -0	0 replies
32/220	drm/amdgpu: reject oversized IBs with per-ring packet limits`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+26 -1	0 replies
33/220	drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12`drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c`	+5 -0	0 replies
34/220	drm/amdgpu: fix aperture iounmap skipped on device removal`drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+2 -8	0 replies
35/220	ASoC: SOF: topology: Use acpi mach from the machine driver`sound/soc/intel/common/sof-function-topology-lib.c`	+6 -1	0 replies
36/220	Input: xpad - add support for ZENAIM LEVERLESS`drivers/input/joystick/xpad.c`	+2 -0	0 replies
37/220	Input: cs40l50-vibra - validate custom data from user space`drivers/input/misc/cs40l50-vibra.c`	+8 -2	0 replies
38/220	powerpc/pseries: pci - logic bug`arch/powerpc/platforms/pseries/pci.c`	+1 -1	0 replies
39/220	Input: synaptics-rmi4 - fix F55 transmitter electrode count typo`drivers/input/rmi4/rmi_f55.c`	+2 -2	0 replies
40/220	Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet`drivers/input/mouse/focaltech.c`	+1 -1	0 replies
41/220	Input: psxpad-spi - set driver data before use`drivers/input/joystick/psxpad-spi.c`	+1 -0	0 replies
42/220	Input: atkbd - skip deactivate for Xiaomi Book Pro 14s internal keyboard`drivers/input/keyboard/atkbd.c`	+8 -0	0 replies
43/220	Input: iforce - validate input packet lengths`drivers/input/joystick/iforce/iforce-packets.c` `drivers/input/joystick/iforce/iforce-usb.c`	+13 -1	0 replies
44/220	powerpc/pseries: lparcfg - fix kbuf[] underflow`arch/powerpc/platforms/pseries/lparcfg.c`	+1 -1	0 replies
45/220	Input: synaptics-rmi4 - zero report size on F54 work error`drivers/input/rmi4/rmi_f54.c`	+8 -8	0 replies
46/220	Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer`drivers/input/rmi4/rmi_f54.c`	+10 -2	0 replies
47/220	Input: synaptics-rmi4 - block s_input when F54 queue is busy`drivers/input/rmi4/rmi_f54.c`	+6 -1	0 replies
48/220	Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue`drivers/input/rmi4/rmi_f54.c`	+8 -0	0 replies
49/220	Input: hynitron_cstxxx - validate touch count and finger IDs`drivers/input/touchscreen/hynitron_cstxxx.c`	+10 -3	0 replies
50/220	crypto: starfive - use scatterlist length before DMA mapping`drivers/crypto/starfive/jh7110-aes.c`	+1 -1	0 replies
51/220	crypto: qce - fix error path in devm_qce_register_algs`drivers/crypto/qce/core.c`	+1 -1	0 replies
52/220	gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind`drivers/gpio/gpio-sloppy-logic-analyzer.c`	+1 -1	0 replies
53/220	pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0`drivers/pmdomain/arm/scmi_perf_domain.c`	+1 -1	0 replies
54/220	libceph: fix multiple unsafe decodes in decode_locker()`net/ceph/cls_lock_client.c`	+9 -4	0 replies
55/220	ftrace: Protect direct_functions in ftrace_find_rec_direct`kernel/trace/ftrace.c`	+2 -1	0 replies
56/220	ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()`kernel/trace/ftrace.c`	+5 -1	0 replies
57/220	openrisc: signal: do not restore privileged SR bits on sigreturn`arch/openrisc/include/asm/processor.h` `arch/openrisc/kernel/signal.c`	+5 -2	0 replies
58/220	Input: sur40 - fix input device registration ordering`drivers/input/touchscreen/sur40.c`	+11 ~~-10~~	0 replies
59/220	Input: sur40 - fix V4L error path cleanup`drivers/input/touchscreen/sur40.c`	+3 -1	0 replies
60/220	libceph: Avoid using invalid osd indices from primary_temp`net/ceph/osdmap.c`	+3 -2	0 replies
61/220	ceph: fix MDS random selection readiness predicate`fs/ceph/mdsmap.c`	+1 -1	0 replies
62/220	libceph: tolerate addrvecs with multiple entries of the same type`net/ceph/decode.c`	+9 -9	0 replies
63/220	mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit`drivers/mmc/host/omap_hsmmc.c`	+1 -1	0 replies
64/220	mmc: sdhci: unmap the bounce buffer before device release`drivers/mmc/host/sdhci.c`	+16 -0	0 replies
65/220	mmc: sdhci: make tuning_err a signed int`drivers/mmc/host/sdhci.h`	+1 -1	0 replies
66/220	mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition`drivers/mmc/host/atmel-mci.c`	+2 -0	0 replies
67/220	drm/connector/hdmi: Fix out of bounds memory read`drivers/gpu/drm/display/drm_hdmi_state_helper.c`	+2 -1	0 replies
68/220	drm/xe: Order ring writes before ring tail updates`drivers/gpu/drm/xe/xe_lrc.c`	+7 -0	0 replies
69/220	drm/radeon: fix autosuspend cleanup during teardown`drivers/gpu/drm/radeon/radeon_kms.c`	+1 -0	0 replies
70/220	s390/vfio_ccw: Free all memory if cp_init() fails`drivers/s390/cio/vfio_ccw_cp.c`	+18 -4	0 replies
71/220	s390/vfio_ccw: Limit the number of channel program segments`drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_cp.h`	+14 -0	0 replies
72/220	s390/vfio_ccw: Cancel existing workqueues`drivers/s390/cio/vfio_ccw_ops.c`	+15 -0	0 replies
73/220	s390/vfio_ccw: Ensure index for read/write regions are within range`drivers/s390/cio/vfio_ccw_async.c` `drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_ops.c`	+34 -4	0 replies
74/220	s390/vfio_ccw: Ensure first IDAW remains constant`drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_cp.h`	+18 -0	0 replies
75/220	s390/vfio_ccw: Fix out of bounds check on CCW array`drivers/s390/cio/vfio_ccw_cp.c`	+5 ~~-12~~	0 replies
76/220	s390/vfio_ccw: Move cp cleanup out of not operational`drivers/s390/cio/vfio_ccw_drv.c` `drivers/s390/cio/vfio_ccw_fsm.c` `drivers/s390/cio/vfio_ccw_ops.c` +1 more	+26 -2	0 replies
77/220	s390/vfio_ccw: Selectively expand io_mutex`drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_drv.c` +2 more	+19 -5	0 replies
78/220	s390/vfio_ccw: Calculate idal length based on idaw type`drivers/s390/cio/vfio_ccw_cp.c`	+3 -2	0 replies
79/220	s390/vfio_ccw: Implement a crw lock`drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_drv.c` `drivers/s390/cio/vfio_ccw_ops.c` +1 more	+30 ~~-10~~	0 replies
80/220	drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix`drivers/gpu/drm/amd/display/dc/core/dc_hw_sequencer.c`	+20 ~~-11~~	0 replies
81/220	drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE`drivers/gpu/drm/amd/display/dc/dce/dce_transform.c` `drivers/gpu/drm/amd/display/dc/dce110/dce110_opp_csc_v.c`	+8 -6	0 replies
82/220	drm/amdgpu: Reject UVD message with invalid number of h265 refs`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+3 -0	0 replies
83/220	drm/amdgpu: fix nbif 6.3.1 l1 low power not functional`drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c`	+17 ~~-25~~	0 replies
84/220	drm/amdgpu: check ASPM on the dGPU host link`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+49 -1	0 replies
85/220	drm/amdgpu: validate GEM_CREATE domain combinations`drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c`	+21 -0	0 replies
86/220	drm/amdgpu: Reject UVD message with dimensions above 4096`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
87/220	drm/amdgpu: Implement insert_end for VCE 3`drivers/gpu/drm/amd/amdgpu/vce_v3_0.c`	+22 -4	0 replies
88/220	drm/amdgpu: Fix UVD min buffer sizes`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+7 -5	0 replies
89/220	drm/amdgpu: Fix UVD dpb min size calculation for H264`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+4 ~~-58~~	0 replies
90/220	drm/amdgpu: Fix UVD decode image min size calculation`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
91/220	drm/amdgpu: disallow multiple FENCE chunks in one submit`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+4 -0	0 replies
92/220	xfs: clear zapped attr fork state when bmap repair finds no attr fork`fs/xfs/scrub/bmap.c`	+5 -0	0 replies
93/220	xfs: zero i_nlink before repair puts inode on unlinked list`fs/xfs/scrub/nlinks_repair.c`	+6 -1	0 replies
94/220	xfs: only check mergeability of bnobt records`fs/xfs/scrub/alloc.c`	+3 -2	0 replies
95/220	xfs: dont double-lock when deleting a self-referential directory`fs/xfs/scrub/dirtree_repair.c`	+18 -4	0 replies
96/220	xfs: set the prev pointer when reinserting an inode on the unlinked list`fs/xfs/scrub/agheader_repair.c`	+4 -0	0 replies
97/220	xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers`fs/xfs/scrub/agheader_repair.c`	+12 -2	0 replies
98/220	xfs: nlink scrub must take IOLOCK before determining ILOCK state`fs/xfs/scrub/nlinks.c`	+7 -6	0 replies
99/220	xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev`fs/xfs/scrub/agheader_repair.c`	+1 -1	0 replies
100/220	xfs: fix ilock leak on error in xfs_dq_get_next_id`fs/xfs/xfs_dquot.c`	+2 -1	0 replies
101/220	xfs: dont zap the attr fork on repair when there are queued pptr updates`fs/xfs/scrub/attr_repair.c`	+2 -1	0 replies
102/220	xfs: dont walk off the end of a null sc->sa.agi_bp in AGI repair`fs/xfs/scrub/agheader_repair.c`	+1 -1	0 replies
103/220	xfs: fix allocated inodes that show up in the unlinked list`fs/xfs/scrub/agheader_repair.c` `fs/xfs/scrub/trace.h`	+57 -7	0 replies
104/220	xfs: fix another iunlink infinite loop bug in online fsck`fs/xfs/scrub/agheader_repair.c` `fs/xfs/scrub/trace.h`	+29 -9	0 replies
105/220	xfs: dont return EFSCORRUPTED when scrubbing corrupt parent pointers`fs/xfs/scrub/parent.c`	+1 -1	0 replies
106/220	xfs: avoid UAF on sc->tempip in xrep_tempfile_create`fs/xfs/scrub/tempfile.c`	+1 -0	0 replies
107/220	xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN`fs/xfs/libxfs/xfs_exchmaps.c`	+10 -0	0 replies
108/220	xfs: dont swallow dquot recovery verification errors`fs/xfs/xfs_dquot_item_recover.c`	+1 -1	0 replies
109/220	xfs: check xfarray iteration errors when committing unlinked inode lists`fs/xfs/scrub/agheader_repair.c`	+4 -0	0 replies
110/220	xfs: check v5 superblock features early`fs/xfs/libxfs/xfs_sb.c`	+2 -2	0 replies
111/220	ceph: Remove ceph_writepage()`fs/ceph/addr.c`	+1 ~~-27~~	0 replies
112/220	ceph: Use a folio in ceph_page_mkwrite()`fs/ceph/addr.c`	+13 ~~-13~~	0 replies
113/220	ceph: Convert ceph_find_incompatible() to take a folio`fs/ceph/addr.c`	+19 ~~-19~~	0 replies
114/220	ceph: Convert writepage_nounlock() to write_folio_nounlock()`fs/ceph/addr.c`	+34 ~~-33~~	0 replies
115/220	ceph: fix writeback_count leak in write_folio_nounlock()`fs/ceph/addr.c`	+9 -0	0 replies
116/220	ceph: avoid fs reclaim while using current->journal_info`fs/ceph/mds_client.c`	+11 -0	0 replies
117/220	ceph: fix hanging __ceph_get_caps() with stale mds_wanted`fs/ceph/caps.c` `fs/ceph/file.c` `fs/ceph/mds_client.h`	+21 -6	0 replies
118/220	libceph: Amend checking to fix `make W=1` build breakage`net/ceph/osdmap.c`	+2 -2	0 replies
119/220	libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE`net/ceph/osdmap.c`	+2 -2	0 replies
120/220	mm/khugepaged: guard is_zero_pfn() calls with pte_present()`mm/khugepaged.c`	+21 ~~-14~~	0 replies
121/220	userfaultfd: prevent registration of special VMAs`include/linux/userfaultfd_k.h`	+6 -0	0 replies
122/220	libceph: fix two unsafe bare decodes in decode_lockers()`net/ceph/cls_lock_client.c`	+6 -2	0 replies
123/220	net/sched: serialize qdisc_rtab_list against concurrent get/put`net/sched/sch_api.c`	+19 -5	0 replies
124/220	super: remove pointless s_root checks`fs/super.c`	+6 ~~-13~~	0 replies
125/220	super: skip dying superblocks early`fs/super.c`	+6 -0	0 replies
126/220	super: use a common iterator (Part 1)`fs/super.c` `include/linux/fs.h`	+18 ~~-55~~	0 replies
127/220	super: use common iterator (Part 2)`fs/super.c` `include/linux/fs.h`	+40 ~~-14~~	0 replies
128/220	fs/super: fix emergency thaw double-unlock of s_umount`fs/super.c`	+5 -2	0 replies
129/220	super: fix emergency thaw deadlock on frozen block devices`fs/super.c`	+16 -2	0 replies
130/220	smb: move smb_version_values to common/smbglob.h`fs/smb/client/cifsglob.h` `fs/smb/common/cifsglob.h` `fs/smb/server/smb2misc.c` +3 more	+53 ~~-72~~	0 replies
131/220	smb: move get_rfc1002_len() to common/smbglob.h`fs/smb/client/cifsglob.h` `fs/smb/client/cifssmb.c` `fs/smb/client/connect.c` +3 more	+13 ~~-19~~	0 replies
132/220	smb/server: rename include guard in smb_common.h`fs/smb/server/smb_common.h`	+3 -3	0 replies
133/220	ksmbd: rename smb2_get_msg to smb_get_msg`fs/smb/server/auth.c` `fs/smb/server/connection.c` `fs/smb/server/oplock.c` +4 more	+54 ~~-54~~	0 replies
134/220	smb/server: fix minimum SMB1 PDU size`fs/smb/server/connection.c`	+3 -2	2 replies
135/220	smb/server: fix minimum SMB2 PDU size`fs/smb/server/connection.c`	+2 -2	0 replies
136/220	ksmbd: validate minimum PDU size for transform requests`fs/smb/server/connection.c`	+11 -5	0 replies
137/220	eventpoll: pin files while checking reverse paths`fs/eventpoll.c`	+16 -1	0 replies
138/220	tcp: Pass flags to __tcp_send_ack`include/net/tcp.h` `net/ipv4/bpf_tcp_ca.c` `net/ipv4/tcp_dctcp.h` +1 more	+6 -6	0 replies
139/220	tcp: fast path functions later`include/net/tcp.h`	+27 ~~-27~~	0 replies
140/220	tcp: reorganize tcp_sock_write_txrx group for variables later`include/linux/tcp.h` `net/ipv4/tcp.c`	+4 -4	0 replies
141/220	tcp: challenge ACK for non-exact RST in SYN-RECEIVED`include/net/tcp.h` `net/ipv4/tcp_input.c` `net/ipv4/tcp_minisocks.c`	+56 ~~-14~~	0 replies
142/220	iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace`drivers/iommu/iommufd/device.c`	+1 -1	0 replies
143/220	btrfs: add debug build only WARN`fs/btrfs/messages.h`	+7 -0	0 replies
144/220	btrfs: add space_info argument to btrfs_chunk_alloc()`fs/btrfs/block-group.c` `fs/btrfs/block-group.h` `fs/btrfs/extent-tree.c` +2 more	+27 ~~-16~~	0 replies
145/220	btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()`fs/btrfs/block-group.c` `fs/btrfs/zoned.c` `fs/btrfs/zoned.h`	+6 -9	0 replies
146/220	btrfs: zoned: fix missing chunk metadata reservation`fs/btrfs/block-group.c`	+19 ~~-15~~	0 replies
147/220	KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs`arch/x86/kvm/x86.c`	+13 -0	0 replies
148/220	ASoC: tas2562: Validate values for volume writes`sound/soc/codecs/tas2562.c`	+7 -2	0 replies
149/220	ata: libata-scsi: terminate deferred commands on time out`drivers/ata/libata-eh.c` `drivers/ata/libata-scsi.c` `drivers/ata/libata.h` +1 more	+110 ~~-39~~	0 replies
150/220	igc: remove napi_synchronize() in igc_down()`drivers/net/ethernet/intel/igc/igc_main.c`	+0 -1	0 replies
151/220	ksmbd: conn lock to serialize smb2 negotiate`fs/smb/server/smb2pdu.c`	+2 -0	0 replies
152/220	ksmbd: reject repeated SMB2 NEGOTIATE requests`fs/smb/server/connection.h` `fs/smb/server/smb2pdu.c` `fs/smb/server/smb_common.c`	+37 ~~-15~~	0 replies
153/220	net: pktgen: fix code style (WARNING: Block comments)`net/core/pktgen.c`	+23 ~~-16~~	0 replies
154/220	net: pktgen: fix proc entry use-after-free`net/core/pktgen.c`	+1 -3	0 replies
155/220	binfmt_misc: dont leak the user namespace when the mount fails`fs/binfmt_misc.c`	+15 ~~-17~~	0 replies
156/220	fsnotify, lsm: Decouple fsnotify from lsm`fs/notify/fanotify/Kconfig` `fs/open.c` `security/security.c`	+5 -9	0 replies
157/220	fsnotify: opt-in for permission events at file open time`fs/notify/fsnotify.c` `fs/open.c` `include/linux/fs.h` +1 more	+106 ~~-22~~	0 replies
158/220	fs: dont block write during exec on pre-content watched files`fs/binfmt_elf.c` `fs/binfmt_elf_fdpic.c` `fs/exec.c` +2 more	+36 ~~-14~~	0 replies
159/220	binfmt_misc: restore write access when removing an entry`fs/binfmt_misc.c`	+3 -1	0 replies
160/220	vrf: Make pcpu_dstats update functions available to other modules.`drivers/net/vrf.c` `include/linux/netdevice.h`	+54 ~~-35~~	0 replies
161/220	vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS.`drivers/net/vxlan/vxlan_core.c`	+14 ~~-14~~	0 replies
162/220	vxlan: use pskb_network_may_pull() for transmit path header pulls`drivers/net/vxlan/vxlan_core.c` `drivers/net/vxlan/vxlan_mdb.c`	+5 -5	0 replies
163/220	ice: fix VF interrupts cleanup`drivers/net/ethernet/intel/ice/ice_vf_lib.c` `drivers/net/ethernet/intel/ice/ice_vf_lib_private.h` `drivers/net/ethernet/intel/ice/ice_virtchnl.c`	+49 -0	0 replies
164/220	include/linux/fs.h: add inode_lock_killable()`include/linux/fs.h`	+10 -0	0 replies
165/220	smb: client: fix race with fallocate(2) and AIO+DIO`fs/smb/client/cifsfs.c` `fs/smb/client/inode.c` `fs/smb/client/smb2ops.c`	+26 ~~-15~~	0 replies
166/220	cifs: add fscache_resize_cookie() to cifs_setsize()`fs/smb/client/inode.c`	+1 -0	0 replies
167/220	can: rcar_canfd: change the initializing flow for clocks and resets`drivers/net/can/rcar/rcar_canfd.c`	+14 ~~-14~~	0 replies
168/220	drm/amd/pm: Use same metric table for APU`drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c`	+55 ~~-47~~	0 replies
169/220	drm/amd/pm: Use macro to initialize metrics table`drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c` `drivers/gpu/drm/amd/pm/swsmu/smu_cmn.h`	+12 ~~-60~~	0 replies
170/220	drm/amd/pm: fix torn gpu metrics reads`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+12 ~~-11~~	0 replies
171/220	drm/amdgpu: remove unused function parameter`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c` +3 more	+7 ~~-12~~	0 replies
172/220	drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+16 ~~-14~~	0 replies
173/220	drm/amd/pm: adjust the visibility of pp_table sysfs node`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c` +1 more	+24 -6	0 replies
174/220	drm/amd/pm: fix pptable use-after-free`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+16 ~~-14~~	0 replies
175/220	net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()`drivers/net/tap.c`	+14 ~~-10~~	0 replies
176/220	drm/vmwgfx: take fman->lock around fence list mutation in fifo_down`drivers/gpu/drm/vmwgfx/vmwgfx_fence.c`	+9 -1	0 replies
177/220	ring-buffer: Simplify functions with __free(kfree) to free allocations`kernel/trace/ring_buffer.c`	+9 ~~-18~~	0 replies
178/220	ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()`kernel/trace/ring_buffer.c`	+1 -0	0 replies
179/220	mm/pagewalk: split walk_page_range_novma() into kernel/user parts`arch/loongarch/mm/pageattr.c` `arch/openrisc/kernel/dma.c` `arch/riscv/mm/pageattr.c` +5 more	+74 ~~-35~~	0 replies
180/220	mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF`mm/pagewalk.c` `mm/vmalloc.c`	+66 ~~-16~~	0 replies
181/220	mm/ptdump: always stabilise against page table freeing using init_mm`mm/pagewalk.c` `mm/ptdump.c`	+16 -5	0 replies
182/220	KVM: SVM: Serialize accesses to the owner and mirror list with separate lock`arch/x86/kvm/svm/sev.c` `arch/x86/kvm/svm/svm.h`	+28 ~~-12~~	0 replies
183/220	ring-buffer: Simplify ring_buffer_read_page() with guard()`kernel/trace/ring_buffer.c`	+11 ~~-17~~	0 replies
184/220	ring-buffer: Make ring_buffer_{un}map() simpler with guard(mutex)`kernel/trace/ring_buffer.c`	+11 ~~-24~~	2 replies
185/220	ring-buffer: Prevent resizing of persistent ring buffer`kernel/trace/ring_buffer.c`	+2 -0	0 replies
186/220	x86/mce: Remove __mcheck_cpu_init_early()`arch/x86/kernel/cpu/mce/amd.c` `arch/x86/kernel/cpu/mce/core.c`	+4 ~~-14~~	0 replies
187/220	x86/mce: Set CR4.MCE last during init`arch/x86/kernel/cpu/mce/core.c`	+3 -2	0 replies
188/220	x86/mce: Set up the polling timer before CMCI discovery`arch/x86/kernel/cpu/mce/core.c`	+1 -1	0 replies
189/220	ipv4: start using dst_dev_rcu()`net/ipv4/icmp.c` `net/ipv4/ip_fragment.c` `net/ipv4/ipmr.c` +1 more	+11 -9	3 replies
190/220	ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup`sound/soc/sof/ipc4-topology.c`	+33 -0	0 replies
191/220	net/x25: fix use-after-free of the socket by its timers`net/x25/af_x25.c` `net/x25/x25_timer.c`	+18 ~~-11~~	0 replies
192/220	arm64: tegra: Add EL2 virtual timer interrupt for Tegra194`arch/arm64/boot/dts/nvidia/tegra194.dtsi`	+2 -0	1 reply
193/220	crypto: ccm - Set rfc4309 maxauthsize from child`crypto/ccm.c`	+1 -1	0 replies
194/220	crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()`drivers/crypto/tegra/tegra-se-aes.c`	+3 ~~-19~~	0 replies
195/220	netfilter: ipset: fix refcount race between list:set GC and swap`net/netfilter/ipset/ip_set_core.c`	+13 -6	0 replies
196/220	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path`net/netfilter/nf_tables_offload.c`	+1 -1	0 replies
197/220	netfilter: flowtable: publish GC-visible tuple last`net/netfilter/nf_flow_table_core.c`	+4 -3	0 replies
198/220	netfilter: ipset: fix list type element drift bug`net/netfilter/ipset/ip_set_list_set.c`	+5 -2	0 replies
199/220	netfilter: ipset: let destroy callbacks adjust ext mem size`net/netfilter/ipset/ip_set_bitmap_gen.h` `net/netfilter/ipset/ip_set_list_set.c`	+2 -3	0 replies
200/220	ipvlan: inherit needed_headroom and needed_tailroom from phy_dev`drivers/net/ipvlan/ipvlan_main.c`	+4 -0	0 replies
201/220	macvlan: inherit needed_headroom and needed_tailroom from lowerdev`drivers/net/macvlan.c`	+4 -0	0 replies
202/220	veth: fix queue index used to wake the peer txq in veth_poll`drivers/net/veth.c`	+1 -1	2 replies
203/220	tcp: fix icsk_ack.ato bitfield overflow`net/ipv4/tcp_input.c` `net/ipv4/tcp_timer.c`	+6 -4	0 replies
204/220	net: packet: fix wrong transport_header when sending VLAN-tagged frame`net/packet/af_packet.c`	+2 -2	0 replies
205/220	net/tls: Fail tls_sw_splice_read() after a failed async decrypt`net/tls/tls_sw.c`	+5 -0	0 replies
206/220	ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers`sound/soc/xilinx/xlnx_formatter_pcm.c`	+4 -6	0 replies
207/220	af_packet: Dont send zero-byte data in tpacket_snd().`net/packet/af_packet.c`	+3 -0	0 replies
208/220	net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain`net/sched/act_api.c`	+5 -5	0 replies
209/220	net/sched: cls_u32: skip hash tables in u32_bind_class()`net/sched/cls_u32.c`	+3 -0	0 replies
210/220	m68k: Define NR_CPUS to 1`arch/m68k/Kconfig.cpu`	+4 -0	0 replies
211/220	net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG`drivers/net/ethernet/ti/am65-cpsw-nuss.c`	+2 -0	0 replies
212/220	net/sched: cls_bpf: reject dev-bound programs bound to a different device`net/sched/cls_bpf.c`	+16 -2	0 replies
213/220	drm/xe/oa: Fix sync entry leak on OA config emit failure`drivers/gpu/drm/xe/xe_oa.c`	+4 -0	0 replies
214/220	erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms`fs/erofs/Kconfig`	+2 -1	0 replies
215/220	perf: Unify perf_event_free_task() / perf_event_exit_task_context()`kernel/events/core.c`	+25 ~~-68~~	0 replies
216/220	perf/core: Fix group leader use-after-free after sibling detach`kernel/events/core.c`	+37 ~~-29~~	0 replies
217/220	fs: unlock the superblock during iterate_supers_type`fs/super.c`	+3 -1	0 replies
218/220	binfmt_misc: use exe_file_deny_write_access() for the interpreter clone`fs/binfmt_misc.c`	+8 -2	0 replies
219/220	net: harmonize tstats and dstats`include/linux/netdevice.h` `net/core/dev.c`	+15 -1	0 replies
220/220	ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS`include/linux/netdevice.h` `include/net/ip_tunnels.h`	+23 -8	0 replies

Reviews trailers per patch

163 of 220 patches have a Reviewed-by or Acked-by.

Patch	Weidong Zhu	Christoph Hellwig	Aleksandr Loktionov	Dima Ruinskiy	Julian Anastasov	Miquel Raynal	Zhihao Cheng	SJ Park	Tom Lendacky	Matthieu Baerts (NGI0)	Alexandra Winter	Joe Damato	Bard Liao	Charles Keepax	Richard Fitzgerald	Srinivas Kandagatla	Liviu Dudau	Steven Price	Alex Deucher	Marek Olšák	Lijo Lazar	Hawking Zhang	Péter Ujfalusi	Ranjani Sridharan	Nayna Jain	R Nageswara Sastry	Andrew Zhou	Stephen Smalley	Hans Verkuil	Bartosz Golaszewski	Wolfram Sang	Ilya Dryomov	Jiri Olsa	Simon Horman	Stuart Summers	Farhan Ali	Matthew Rosato	Igor Paunovic	Satyajit Roy	Leo Liu	Kenneth Feng	Christian König	Ruijing Dong	Darrick J. Wong	Viacheslav Dubeyko	Linus Walleij	Frank Li	Masami Hiramatsu (Google)	Xiubo Li	Alex Markuze	Nico Pache	Dev Jain	Baolin Wang	Wei Yang	David Hildenbrand	Lorenzo Stoakes	David Hildenbrand (Arm)	Jamal Hadi Salim	Eric Dumazet	Jan Kara	Namjae Jeon	David Howells	Maciej Fijalkowski	Moriya Kadosh	Toke Høiland-Jørgensen	Paul Moore	Christian Brauner	Kevin Tian	Vadim Fedorenko	Ido Schimmel	Patryk Holda	Paulo Alcantara	Claudiu Beznea	Geert Uytterhoeven	Vincent Mailhol	Yang Wang	Asad Kamal	Josef Bacik	Willem de Bruijn	Michael S. Tsirkin	Ian Forbes	Mike Rapoport (Microsoft)	Qi Zheng	Oscar Salvador	Suren Baghdasaryan	Vlastimil Babka	David Sterba	Kiryl Shutsemau	Johannes Thumshirn	Cezary Rojewski	Igor Pylypiv	Niklas Cassel	Martin K. Petersen	Jozsef Kadlecsik	Hangbin Liu	Jesper Dangaard Brouer	Neal Cardwell	Jakub Kicinski	Sabrina Dubroca	Michal Simek	Jiayuan Chen	Victor Nogueira	Davide Caratti	Chintan Vankar	Daniel Borkmann	Ashutosh Dixit	Ravi Bangoria	Dapeng Mi	Guillaume Nault	Qiuxu Zhuo	Tony Luck	Nikolay Borisov	David Ahern	Kai Vehmanen	Liam Girdwood	Pavel Machek (CIP)	Florian Fainelli	Brett A C Sheffield	Dominique Martinet	Miguel Ojeda	Francesco Dolcini	Peter Schneider	Shuah Khan	Ron Economos	Mark Brown
Series																																																																																																																				T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/220	A-b	R-b
2/220
3/220
4/220
5/220
6/220
7/220						R-b	R-b
8/220							R-b
9/220								R-b
10/220
11/220			R-b	R-b
12/220					A-b
13/220																																		R-b
14/220									R-b
15/220									R-b
16/220																												A-b
17/220																												A-b
18/220																												A-b
19/220																												A-b
20/220										R-b
21/220
22/220
23/220										R-b
24/220											R-b	R-b
25/220													R-b
26/220														R-b	R-b
27/220														R-b	R-b
28/220														R-b	R-b
29/220																R-b
30/220
31/220																	R-b	R-b
32/220																			R-b
33/220																			R-b	R-b
34/220																					R-b	R-b
35/220																							R-b	R-b
36/220
37/220
38/220																									A-b	T-b
39/220
40/220
41/220
42/220																											R-b
43/220
44/220																									A-b	T-b
45/220
46/220
47/220																													R-b
48/220
49/220
50/220
51/220																														R-b
52/220																															R-b
53/220
54/220																																R-b
55/220																																	A-b
56/220																																																A-b
57/220
58/220
59/220
60/220																																R-b
61/220																																													R-b
62/220																																R-b
63/220
64/220																																														R-b
65/220																																															R-b
66/220
67/220
68/220																																			R-b
69/220
70/220																																				R-b	R-b
71/220																																					R-b
72/220																																					R-b
73/220																																					R-b
74/220																																					R-b
75/220																																					R-b
76/220																																					R-b
77/220																																					R-b
78/220																																					R-b
79/220																																				R-b	R-b
80/220																																						T-b	T-b
81/220																																						T-b	T-b
82/220																																								R-b
83/220																																									R-b
84/220																						R-b																			R-b
85/220																																										R-b
86/220																																								A-b			R-b
87/220																			A-b
88/220																																								A-b			R-b
89/220																																								A-b			R-b
90/220																																								A-b			R-b
91/220																																										R-b
92/220		R-b																																										R-b
93/220		R-b
94/220		R-b
95/220		R-b
96/220		R-b
97/220		R-b
98/220		R-b
99/220		R-b
100/220		R-b																																										R-b
101/220		R-b
102/220		R-b
103/220		R-b
104/220		R-b
105/220		R-b
106/220		R-b
107/220		R-b																																										R-b
108/220		R-b																																										R-b
109/220		R-b
110/220																																												R-b
111/220																																													T-b R-b
112/220																																													T-b R-b
113/220																																													T-b R-b
114/220																																													T-b R-b
115/220																																													R-b
116/220																																													R-b				R-b
117/220																																																		R-b
118/220																																													R-b
119/220																																																		R-b
120/220																																																			R-b	R-b	R-b	R-b	A-b	R-b
121/220																																																								R-b	A-b
122/220																																													R-b
123/220																																																										A-b	R-b
124/220																																																												R-b
125/220																																																												R-b
126/220																																																												R-b
127/220																																																												R-b
128/220
129/220
130/220																																																													A-b
131/220																																																													A-b
132/220																																																													A-b
133/220
134/220																																																													A-b	R-b
135/220																																																													A-b	R-b
136/220
137/220
138/220																																																											R-b
139/220																																																											R-b
140/220																																																											R-b
141/220																																																											R-b
142/220																																																																				R-b
143/220																																																																														R-b
144/220																																																																																							R-b
145/220																																																																																							R-b		R-b
146/220																																																																																									R-b
147/220
148/220																																																																																										R-b
149/220																																																																																											R-b T-b	R-b	R-b
150/220				R-b																																																											R-b	T-b
151/220
152/220
153/220																																																																	R-b
154/220																																		R-b
155/220
156/220																																																																		A-b
157/220
158/220																																																																			A-b
159/220
160/220
161/220
162/220																																																																					R-b	R-b
163/220			R-b																															R-b																																					T-b
164/220
165/220																																																														R-b
166/220																																																																								R-b
167/220																																																																									T-b	R-b	R-b
168/220																					R-b
169/220																						R-b																																																						R-b	R-b
170/220																																									R-b
171/220																																										R-b
172/220																																										R-b
173/220																					R-b
174/220																																									R-b
175/220																																																																															R-b	A-b
176/220																																																																																	R-b
177/220																																																R-b
178/220
179/220																																																							A-b																											A-b	A-b	R-b	R-b	R-b
180/220																																																				R-b					A-b																									R-b						R-b
181/220																																																									A-b																									R-b						R-b
182/220
183/220																																																R-b
184/220
185/220
186/220																																																																																																														R-b	R-b T-b	R-b
187/220																																																																																																																R-b
188/220
189/220																																																																																																																	R-b
190/220																																																																																																																		R-b	R-b
191/220
192/220
193/220
194/220
195/220																																																																																														A-b
196/220
197/220
198/220																																																																																														A-b
199/220																																																																																														A-b
200/220																																																																																															R-b
201/220																																																																																															R-b
202/220																																																																																																T-b A-b
203/220																																																																																																	R-b
204/220																																																																															R-b
205/220																																																																																																		R-b	R-b
206/220																																																																																																				R-b
207/220																																																																															R-b																						R-b
208/220																																																																																																						T-b	R-b
209/220																																																										A-b
210/220																																																																										R-b
211/220																																		R-b																																																																						R-b
212/220																																																																																																						T-b			A-b
213/220																																																																																																										R-b
214/220								T-b																																																																		T-b
215/220																																																																																																											R-b
216/220																																																																																																												R-b
217/220																																																												R-b
218/220
219/220																																																																																																													R-b
220/220																																																																																																													R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 125 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 000/220] 6.12.105-rc1 review

This is the start of the stable review cycle for the 6.12.105 release. There are 220 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.105-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.105-rc1

Eric Dumazet <[email protected]>
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Paolo Abeni <[email protected]>
net: harmonize tstats and dstats

Christian Brauner <[email protected]>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

Darrick J. Wong <[email protected]>
fs: unlock the superblock during iterate_supers_type

Aditya Chillara <[email protected]>
perf/core: Fix group leader use-after-free after sibling detach

Peter Zijlstra <[email protected]>
perf: Unify perf_event_free_task() / perf_event_exit_task_context()

Gao Xiang <[email protected]>
erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

Linmao Li <[email protected]>
drm/xe/oa: Fix sync entry leak on OA config emit failure

Jamal Hadi Salim <[email protected]>
net/sched: cls_bpf: reject dev-bound programs bound to a different device

Siddharth Vadapalli <[email protected]>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Uwe Kleine-König <[email protected]>
m68k: Define NR_CPUS to 1

Zhang Changzhong <[email protected]>
net/sched: cls_u32: skip hash tables in u32_bind_class()

Jamal Hadi Salim <[email protected]>

    net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain

Eric Dumazet <[email protected]>
af_packet: Don't send zero-byte data in tpacket_snd().

Rosen Penev <[email protected]>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Chuck Lever <[email protected]>
net/tls: Fail tls_sw_splice_read() after a failed async decrypt

Wei Fang <[email protected]>
net: packet: fix wrong transport_header when sending VLAN-tagged frame

Jiayuan Chen <[email protected]>
tcp: fix icsk_ack.ato bitfield overflow

Jonas Köppeler <[email protected]>
veth: fix queue index used to wake the peer txq in veth_poll

Eric Dumazet <[email protected]>
macvlan: inherit needed_headroom and needed_tailroom from lowerdev

Eric Dumazet <[email protected]>
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

Florian Westphal <[email protected]>
netfilter: ipset: let destroy callbacks adjust ext mem size

Florian Westphal <[email protected]>
netfilter: ipset: fix list type element drift bug

Jérémy Jean <[email protected]>
netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy <[email protected]>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Xiang Mei (Microsoft) <[email protected]>
netfilter: ipset: fix refcount race between list:set GC and swap

Vladislav Dronov <[email protected]>

    crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Herbert Xu <[email protected]>
crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter <[email protected]>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Baul Lee <[email protected]>
net/x25: fix use-after-free of the socket by its timers

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

Eric Dumazet <[email protected]>
ipv4: start using dst_dev_rcu()

Breno Leitao <[email protected]>
x86/mce: Set up the polling timer before CMCI discovery

Yazen Ghannam <[email protected]>
x86/mce: Set CR4.MCE last during init

Yazen Ghannam <[email protected]>

    x86/mce: Remove __mcheck_cpu_init_early()

Vincent Donnefort <[email protected]>
ring-buffer: Prevent resizing of persistent ring buffer

Steven Rostedt <[email protected]>
ring-buffer: Make ring_buffer_{un}map() simpler with guard(mutex)

Steven Rostedt <[email protected]>
ring-buffer: Simplify ring_buffer_read_page() with guard()

Paolo Bonzini <[email protected]>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm

Lorenzo Stoakes (ARM) <[email protected]>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF

Lorenzo Stoakes <[email protected]>
mm/pagewalk: split walk_page_range_novma() into kernel/user parts

Vincent Donnefort <[email protected]>
ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

Steven Rostedt <[email protected]>
ring-buffer: Simplify functions with __free(kfree) to free allocations

Zack Rusin <[email protected]>

    drm/vmwgfx: take fman->lock around fence list mutation in fifo_down

Dongli Zhang <[email protected]>

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

Yang Wang <[email protected]>
drm/amd/pm: fix pptable use-after-free

Yang Wang <[email protected]>
drm/amd/pm: adjust the visibility of pp_table sysfs node

Pierre-Eric Pelloux-Prayer <[email protected]>
drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini

Yunxiang Li <[email protected]>
drm/amdgpu: remove unused function parameter

Yang Wang <[email protected]>
drm/amd/pm: fix torn gpu metrics reads

Lijo Lazar <[email protected]>
drm/amd/pm: Use macro to initialize metrics table

Asad Kamal <[email protected]>
drm/amd/pm: Use same metric table for APU

Tu Nguyen <[email protected]>
can: rcar_canfd: change the initializing flow for clocks and resets

Frank Sorenson <[email protected]>
cifs: add fscache_resize_cookie() to cifs_setsize()

Paulo Alcantara <[email protected]>
smb: client: fix race with fallocate(2) and AIO+DIO

Max Kellermann <[email protected]>
include/linux/fs.h: add inode_lock_killable()

Dawid Osuchowski <[email protected]>
ice: fix VF interrupts cleanup

Eric Dumazet <[email protected]>
vxlan: use pskb_network_may_pull() for transmit path header pulls

Guillaume Nault <[email protected]>
vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS.

Guillaume Nault <[email protected]>
vrf: Make pcpu_dstats update functions available to other modules.

Christian Brauner <[email protected]>
binfmt_misc: restore write access when removing an entry

Amir Goldstein <[email protected]>
fs: don't block write during exec on pre-content watched files

Amir Goldstein <[email protected]>
fsnotify: opt-in for permission events at file open time

Song Liu <[email protected]>
fsnotify, lsm: Decouple fsnotify from lsm

Christian Brauner <[email protected]>
binfmt_misc: don't leak the user namespace when the mount fails

Chengfeng Ye <[email protected]>
net: pktgen: fix proc entry use-after-free

Peter Seiderer <[email protected]>
net: pktgen: fix code style (WARNING: Block comments)

Namjae Jeon <[email protected]>
ksmbd: reject repeated SMB2 NEGOTIATE requests

Namjae Jeon <[email protected]>
ksmbd: conn lock to serialize smb2 negotiate

David Carlier <[email protected]>
igc: remove napi_synchronize() in igc_down()

Damien Le Moal <[email protected]>
ata: libata-scsi: terminate deferred commands on time out

Mark Brown <[email protected]>
ASoC: tas2562: Validate values for volume writes

Weiming Shi <[email protected]>
KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs

Guanghui Yang <[email protected]>
btrfs: zoned: fix missing chunk metadata reservation

Filipe Manana <[email protected]>
btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()

Naohiro Aota <[email protected]>
btrfs: add space_info argument to btrfs_chunk_alloc()

David Sterba <[email protected]>
btrfs: add debug build only WARN

Peiyang He <[email protected]>
iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace

Yuxiang Yang <[email protected]>
tcp: challenge ACK for non-exact RST in SYN-RECEIVED

Chia-Yu Chang <[email protected]>
tcp: reorganize tcp_sock_write_txrx group for variables later

Ilpo Järvinen <[email protected]>
tcp: fast path functions later

Ilpo Järvinen <[email protected]>
tcp: Pass flags to __tcp_send_ack

Guidong Han <[email protected]>
eventpoll: pin files while checking reverse paths

Namjae Jeon <[email protected]>
ksmbd: validate minimum PDU size for transform requests

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB2 PDU size

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB1 PDU size

Namjae Jeon <[email protected]>
ksmbd: rename smb2_get_msg to smb_get_msg

ChenXiaoSong <[email protected]>
smb/server: rename include guard in smb_common.h

ZhangGuoDong <[email protected]>
smb: move get_rfc1002_len() to common/smbglob.h

ZhangGuoDong <[email protected]>
smb: move smb_version_values to common/smbglob.h

Christian Brauner <[email protected]>
super: fix emergency thaw deadlock on frozen block devices

Chen Changcheng <[email protected]>
fs/super: fix emergency thaw double-unlock of s_umount

Christian Brauner <[email protected]>
super: use common iterator (Part 2)

Christian Brauner <[email protected]>
super: use a common iterator (Part 1)

Christian Brauner <[email protected]>
super: skip dying superblocks early

Christian Brauner <[email protected]>
super: remove pointless s_root checks

Aldo Ariel Panzardo <[email protected]>
net/sched: serialize qdisc_rtab_list against concurrent get/put

Pavitra Jha <[email protected]>
libceph: fix two unsafe bare decodes in decode_lockers()

Mike Rapoport (Microsoft) <[email protected]>
userfaultfd: prevent registration of special VMAs

Lance Yang <[email protected]>
mm/khugepaged: guard is_zero_pfn() calls with pte_present()

Xiang Mei <[email protected]>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Andy Shevchenko <[email protected]>
libceph: Amend checking to fix make W=1 build breakage

Max Kellermann <[email protected]>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Max Kellermann <[email protected]>

    ceph: avoid fs reclaim while using current->journal_info

Wentao Liang <[email protected]>
ceph: fix writeback_count leak in write_folio_nounlock()

Matthew Wilcox (Oracle) <[email protected]>
ceph: Convert writepage_nounlock() to write_folio_nounlock()

Matthew Wilcox (Oracle) <[email protected]>
ceph: Convert ceph_find_incompatible() to take a folio

Matthew Wilcox (Oracle) <[email protected]>
ceph: Use a folio in ceph_page_mkwrite()

Matthew Wilcox (Oracle) <[email protected]>
ceph: Remove ceph_writepage()

Christoph Hellwig <[email protected]>
xfs: check v5 superblock features early

Darrick J. Wong <[email protected]>
xfs: check xfarray iteration errors when committing unlinked inode lists

Long Li <[email protected]>
xfs: don't swallow dquot recovery verification errors

Lin Jiapeng <[email protected]>
xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

Darrick J. Wong <[email protected]>

    xfs: avoid UAF on sc->tempip in xrep_tempfile_create

Darrick J. Wong <[email protected]>
xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers

Darrick J. Wong <[email protected]>
xfs: fix another iunlink infinite loop bug in online fsck

Darrick J. Wong <[email protected]>
xfs: fix allocated inodes that show up in the unlinked list

Darrick J. Wong <[email protected]>

    xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair

Darrick J. Wong <[email protected]>
xfs: don't zap the attr fork on repair when there are queued pptr updates

Long Li <[email protected]>
xfs: fix ilock leak on error in xfs_dq_get_next_id

Darrick J. Wong <[email protected]>
xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev

Darrick J. Wong <[email protected]>
xfs: nlink scrub must take IOLOCK before determining ILOCK state

Darrick J. Wong <[email protected]>
xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers

Darrick J. Wong <[email protected]>
xfs: set the prev pointer when reinserting an inode on the unlinked list

Darrick J. Wong <[email protected]>
xfs: don't double-lock when deleting a self-referential directory

Darrick J. Wong <[email protected]>
xfs: only check mergeability of bnobt records

Darrick J. Wong <[email protected]>
xfs: zero i_nlink before repair puts inode on unlinked list

Qiang Ma <[email protected]>
xfs: clear zapped attr fork state when bmap repair finds no attr fork

Junrui Luo <[email protected]>
drm/amdgpu: disallow multiple FENCE chunks in one submit

David Rosca <[email protected]>
drm/amdgpu: Fix UVD decode image min size calculation

David Rosca <[email protected]>
drm/amdgpu: Fix UVD dpb min size calculation for H264

David Rosca <[email protected]>
drm/amdgpu: Fix UVD min buffer sizes

David Rosca <[email protected]>
drm/amdgpu: Implement insert_end for VCE 3

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li <[email protected]>
drm/amdgpu: validate GEM_CREATE domain combinations

Yang Wang <[email protected]>
drm/amdgpu: check ASPM on the dGPU host link

Yang Wang <[email protected]>
drm/amdgpu: fix nbif 6.3.1 l1 low power not functional

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with invalid number of h265 refs

Nathan Lucas <[email protected]>
drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE

Nathan Lucas <[email protected]>
drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix

Eric Farman <[email protected]>
s390/vfio_ccw: Implement a crw lock

Eric Farman <[email protected]>
s390/vfio_ccw: Calculate idal length based on idaw type

Eric Farman <[email protected]>
s390/vfio_ccw: Selectively expand io_mutex

Eric Farman <[email protected]>
s390/vfio_ccw: Move cp cleanup out of not operational

Eric Farman <[email protected]>
s390/vfio_ccw: Fix out of bounds check on CCW array

Eric Farman <[email protected]>
s390/vfio_ccw: Ensure first IDAW remains constant

Eric Farman <[email protected]>
s390/vfio_ccw: Ensure index for read/write regions are within range

Eric Farman <[email protected]>
s390/vfio_ccw: Cancel existing workqueues

Eric Farman <[email protected]>
s390/vfio_ccw: Limit the number of channel program segments

Eric Farman <[email protected]>
s390/vfio_ccw: Free all memory if cp_init() fails

Guangshuo Li <[email protected]>
drm/radeon: fix autosuspend cleanup during teardown

Matthew Brost <[email protected]>
drm/xe: Order ring writes before ring tail updates

John Harrison <[email protected]>
drm/connector/hdmi: Fix out of bounds memory read

Pei Xiao <[email protected]>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Haibo Chen <[email protected]>
mmc: sdhci: make tuning_err a signed int

Myeonghun Pak <[email protected]>
mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng <[email protected]>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Kefu Chai <[email protected]>
libceph: tolerate addrvecs with multiple entries of the same type

Yiming Zhu <[email protected]>
ceph: fix MDS random selection readiness predicate

Raphael Zimmer <[email protected]>
libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov <[email protected]>
Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov <[email protected]>
Input: sur40 - fix input device registration ordering

Ali Ahmet Memis <[email protected]>
openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf <[email protected]>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Leon Hwang <[email protected]>
ftrace: Protect direct_functions in ftrace_find_rec_direct

Pavitra Jha <[email protected]>
libceph: fix multiple unsafe decodes in decode_locker()

Praveen Talari <[email protected]>
pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0

Cengiz Can <[email protected]>
gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind

Thorsten Blum <[email protected]>
crypto: qce - fix error path in devm_qce_register_algs

Thorsten Blum <[email protected]>
crypto: starfive - use scatterlist length before DMA mapping

Jianing Li <[email protected]>
Input: hynitron_cstxxx - validate touch count and finger IDs

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson <[email protected]>

    powerpc/pseries: lparcfg - fix kbuf[] underflow

Pengpeng Hou <[email protected]>
Input: iforce - validate input packet lengths

Zhefu Zhang <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li <[email protected]>
Input: psxpad-spi - set driver data before use

Richard Davies <[email protected]>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson <[email protected]>
powerpc/pseries: pci - logic bug

HyeongJun An <[email protected]>
Input: cs40l50-vibra - validate custom data from user space

Kyohei Kadota <[email protected]>
Input: xpad - add support for ZENAIM LEVERLESS

Bard Liao <[email protected]>
ASoC: SOF: topology: Use acpi mach from the machine driver

Asad Kamal <[email protected]>
drm/amdgpu: fix aperture iounmap skipped on device removal

Qiang Yu <[email protected]>
drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12

Candice Li <[email protected]>
drm/amdgpu: reject oversized IBs with per-ring packet limits

Osama Abdelkader <[email protected]>
drm/panthor: skip zero-sized firmware sections

Mingyu Wang <[email protected]>
fbdev: core: Fix pointer desynchronization in fb_io_read()

Dawid Wróbel <[email protected]>
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

Peter Ujfalusi <[email protected]>
ASoC: cs35l41: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: cs35l45: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: cs4265: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

Hidayath Khan <[email protected]>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Wyatt Feng <[email protected]>
mptcp: fastopen: only mark MPTFO subflows with SYN data

Matthieu Baerts (NGI0) <[email protected]>
mptcp: options: reset DSS fields in case of unexpected size

Matthieu Baerts (NGI0) <[email protected]>
mptcp: avoid combining some incoming suboptions

Gang Yan <[email protected]>
selftests: mptcp: join: mark tests with data corruption as failed

Bryam Vargas <[email protected]>
selinux: reject an unclaimed class value in security_get_classes()

Bryam Vargas <[email protected]>
selinux: do not cancel a policy conversion that never started

Bryam Vargas <[email protected]>
selinux: reject a class permission count below its inherited common

Bryam Vargas <[email protected]>
selinux: require every boolean value to be defined

Sean Christopherson <[email protected]>
KVM: SVM: Ensure PSP module is initialized if KVM module is built-in

Sean Christopherson <[email protected]>
crypto: ccp: Add external API interface for PSP module initialization

Erni Sri Satya Vennela <[email protected]>
net: mana: Fix EQ leak in mana_remove on NULL port

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Philipp David <[email protected]>
igc: fix netdev not re-attached after resume if interface is down

SJ Park <[email protected]>

    mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}

liyouhong <[email protected]>
mm/damon/ops-common: putback folios on invalid migrate nid

Liyuan Pang <[email protected]>

    ubi: fastmap: fix ubi->fm memory leak

Cheng Ming Lin <[email protected]>
mtd: ubi: skip programming unused bits in ubi headers

Chao Yu <[email protected]>
f2fs: fix UAF issue in f2fs_merge_page_bio()

Daniel Borkmann <[email protected]>
selftests/bpf: Add tests for stale delta leaking through id reassignment

Daniel Borkmann <[email protected]>

    selftests/bpf: Add tests for delta tracking when src_reg == dst_reg

Daniel Borkmann <[email protected]>
bpf: Clear delta when clearing reg id for non-{add,sub} ops

Daniel Borkmann <[email protected]>

    bpf: Fix linked reg delta tracking when src_reg == dst_reg

Chao Shi <[email protected]>
block: stop the timeout timer when releasing a never added disk

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/loongarch/mm/pageattr.c                       |   2 +-
 arch/m68k/Kconfig.cpu                              |   4 +
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/dma.c                         |   4 +-
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/riscv/mm/pageattr.c                           |   8 +-
 arch/x86/kernel/cpu/mce/amd.c                      |   4 +
 arch/x86/kernel/cpu/mce/core.c                     |  21 +--
 arch/x86/kvm/svm/sev.c                             |  49 ++++--
 arch/x86/kvm/svm/svm.h                             |   1 +
 arch/x86/kvm/x86.c                                 |  13 ++
 block/genhd.c                                      |  12 +-
 crypto/ccm.c                                       |   2 +-
 drivers/ata/libata-eh.c                            |  29 +---
 drivers/ata/libata-scsi.c                          | 115 +++++++++++++--
 drivers/ata/libata.h                               |   3 +-
 drivers/crypto/ccp/sp-dev.c                        |  14 ++
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/crypto/starfive/jh7110-aes.c               |   2 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  22 +--
 drivers/gpio/gpio-sloppy-logic-analyzer.c          |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  63 ++++++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  50 ++++++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c        |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  24 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_object.c         |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  85 +++--------
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h             |   3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |   5 +
 drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c           |  42 +++---
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  26 +++-
 .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c  |  31 ++--
 drivers/gpu/drm/amd/display/dc/dce/dce_transform.c |   7 +-
 .../drm/amd/display/dc/dce110/dce110_opp_csc_v.c   |   7 +-
 drivers/gpu/drm/amd/pm/amdgpu_dpm.c                |  36 ++++-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |  26 ++--
 drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h            |   6 +-
 drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c   |   5 +-
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |   2 +-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c   | 102 +++++++------
 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.c             |  58 --------
 drivers/gpu/drm/amd/pm/swsmu/smu_cmn.h             |  14 +-
 drivers/gpu/drm/display/drm_hdmi_state_helper.c    |   3 +-
 drivers/gpu/drm/panthor/panthor_fw.c               |   3 +
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c              |  10 +-
 drivers/gpu/drm/xe/xe_lrc.c                        |   7 +
 drivers/gpu/drm/xe/xe_oa.c                         |   4 +
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/joystick/xpad.c                      |   2 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/cs40l50-vibra.c                 |  10 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 ++++--
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/hynitron_cstxxx.c        |  13 +-
 drivers/input/touchscreen/sur40.c                  |  23 +--
 drivers/iommu/iommufd/device.c                     |   2 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 ++
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/mtd/ubi/attach.c                           |   4 +-
 drivers/mtd/ubi/fastmap-wl.c                       |   8 +-
 drivers/mtd/ubi/io.c                               |  10 ++
 drivers/mtd/ubi/ubi.h                              |  12 ++
 drivers/net/can/rcar/rcar_canfd.c                  |  28 ++--
 drivers/net/ethernet/intel/ice/ice_vf_lib.c        |  27 ++++
 .../net/ethernet/intel/ice/ice_vf_lib_private.h    |   1 +
 drivers/net/ethernet/intel/ice/ice_virtchnl.c      |  21 +++
 drivers/net/ethernet/intel/igc/igc_main.c          |   9 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |   4 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +
 drivers/net/ipvlan/ipvlan_main.c                   |   4 +
 drivers/net/macvlan.c                              |   4 +
 drivers/net/tap.c                                  |  24 +--
 drivers/net/veth.c                                 |   2 +-
 drivers/net/vrf.c                                  |  49 ++----
 drivers/net/vxlan/vxlan_core.c                     |  34 ++---
 drivers/net/vxlan/vxlan_mdb.c                      |   4 +-
 drivers/pmdomain/arm/scmi_perf_domain.c            |   2 +-
 drivers/s390/cio/vfio_ccw_async.c                  |  16 ++
 drivers/s390/cio/vfio_ccw_chp.c                    |  31 +++-
 drivers/s390/cio/vfio_ccw_cp.c                     |  74 +++++++---
 drivers/s390/cio/vfio_ccw_cp.h                     |  10 ++
 drivers/s390/cio/vfio_ccw_drv.c                    |  21 ++-
 drivers/s390/cio/vfio_ccw_fsm.c                    |   8 +-
 drivers/s390/cio/vfio_ccw_ops.c                    |  39 ++++-
 drivers/s390/cio/vfio_ccw_private.h                |  10 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/video/fbdev/core/fb_io_fops.c              |   8 +
 fs/binfmt_elf.c                                    |   4 +-
 fs/binfmt_elf_fdpic.c                              |   4 +-
 fs/binfmt_misc.c                                   |  46 +++---
 fs/btrfs/block-group.c                             |  61 ++++----
 fs/btrfs/block-group.h                             |   3 +-
 fs/btrfs/extent-tree.c                             |   6 +-
 fs/btrfs/messages.h                                |   7 +
 fs/btrfs/space-info.c                              |   2 +-
 fs/btrfs/transaction.c                             |   5 +-
 fs/btrfs/zoned.c                                   |   5 +-
 fs/btrfs/zoned.h                                   |   6 +-
 fs/ceph/addr.c                                     | 164 ++++++++++-----------
 fs/ceph/caps.c                                     |  17 ++-
 fs/ceph/file.c                                     |   9 +-
 fs/ceph/mds_client.c                               |  11 ++
 fs/ceph/mds_client.h                               |   1 +
 fs/ceph/mdsmap.c                                   |   2 +-
 fs/erofs/Kconfig                                   |   3 +-
 fs/eventpoll.c                                     |  17 ++-
 fs/exec.c                                          |   8 +-
 fs/f2fs/data.c                                     |   2 +-
 fs/notify/fanotify/Kconfig                         |   1 -
 fs/notify/fsnotify.c                               |  38 +++++
 fs/open.c                                          |  12 +-
 fs/smb/client/cifsfs.c                             |  22 ++-
 fs/smb/client/cifsglob.h                           |  27 ----
 fs/smb/client/cifssmb.c                            |   6 +-
 fs/smb/client/connect.c                            |   2 +-
 fs/smb/client/inode.c                              |   2 +
 fs/smb/client/smb2ops.c                            |  18 +--
 fs/smb/client/transport.c                          |   8 +-
 fs/smb/common/cifsglob.h                           |  36 +++++
 fs/smb/server/auth.c                               |   4 +-
 fs/smb/server/connection.c                         |  23 ++-
 fs/smb/server/connection.h                         |   5 +
 fs/smb/server/oplock.c                             |   8 +-
 fs/smb/server/smb2misc.c                           |   2 +-
 fs/smb/server/smb2ops.c                            |  32 ++--
 fs/smb/server/smb2pdu.c                            |  88 ++++++-----
 fs/smb/server/smb2pdu.h                            |   9 --
 fs/smb/server/smb_common.c                         |  43 ++++--
 fs/smb/server/smb_common.h                         |  43 ++----
 fs/super.c                                         | 137 +++++++++--------
 fs/xfs/libxfs/xfs_exchmaps.c                       |  10 ++
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 fs/xfs/scrub/agheader_repair.c                     | 120 ++++++++++++---
 fs/xfs/scrub/alloc.c                               |   5 +-
 fs/xfs/scrub/attr_repair.c                         |   3 +-
 fs/xfs/scrub/bmap.c                                |   5 +
 fs/xfs/scrub/dirtree_repair.c                      |  22 ++-
 fs/xfs/scrub/nlinks.c                              |  13 +-
 fs/xfs/scrub/nlinks_repair.c                       |   7 +-
 fs/xfs/scrub/parent.c                              |   2 +-
 fs/xfs/scrub/tempfile.c                            |   1 +
 fs/xfs/scrub/trace.h                               |   2 +
 fs/xfs/xfs_dquot.c                                 |   3 +-
 fs/xfs/xfs_dquot_item_recover.c                    |   2 +-
 include/linux/fs.h                                 |  77 +++++++++-
 include/linux/fsnotify.h                           |  39 +++--
 include/linux/libata.h                             |   2 +
 include/linux/netdevice.h                          |  45 +++++-
 include/linux/pagewalk.h                           |   7 +-
 include/linux/psp-sev.h                            |   9 ++
 include/linux/tcp.h                                |   4 +-
 include/linux/userfaultfd_k.h                      |   6 +
 include/net/ip_tunnels.h                           |  28 +++-
 include/net/ip_vs.h                                |   7 +
 include/net/tcp.h                                  |  58 ++++----
 include/uapi/linux/ip_vs.h                         |   6 -
 kernel/bpf/verifier.c                              |  51 ++++---
 kernel/events/core.c                               | 159 ++++++++------------
 kernel/fork.c                                      |  12 +-
 kernel/trace/ftrace.c                              |   9 +-
 kernel/trace/ring_buffer.c                         |  93 +++++-------
 mm/damon/paddr.c                                   |  15 +-
 mm/hugetlb_vmemmap.c                               |   2 +-
 mm/internal.h                                      |   6 +
 mm/khugepaged.c                                    |  35 +++--
 mm/pagewalk.c                                      |  97 ++++++++----
 mm/ptdump.c                                        |  10 +-
 mm/vmalloc.c                                       |  60 +++++++-
 net/ceph/cls_lock_client.c                         |  21 ++-
 net/ceph/decode.c                                  |  18 +--
 net/ceph/osdmap.c                                  |   9 +-
 net/core/dev.c                                     |  14 ++
 net/core/pktgen.c                                  |  43 +++---
 net/ipv4/bpf_tcp_ca.c                              |   2 +-
 net/ipv4/icmp.c                                    |   6 +-
 net/ipv4/ip_fragment.c                             |   6 +-
 net/ipv4/ipmr.c                                    |   4 +-
 net/ipv4/route.c                                   |   4 +-
 net/ipv4/tcp.c                                     |   4 +-
 net/ipv4/tcp_dctcp.h                               |   2 +-
 net/ipv4/tcp_input.c                               |  62 ++++++--
 net/ipv4/tcp_minisocks.c                           |  12 +-
 net/ipv4/tcp_output.c                              |   6 +-
 net/ipv4/tcp_timer.c                               |   4 +-
 net/mptcp/fastopen.c                               |   7 +-
 net/mptcp/options.c                                |  67 ++++++++-
 net/mptcp/protocol.h                               |   1 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipset/ip_set_core.c                  |  19 ++-
 net/netfilter/ipset/ip_set_list_set.c              |  10 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +-
 net/netfilter/ipvs/ip_vs_ctl.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/packet/af_packet.c                             |   7 +-
 net/sched/act_api.c                                |  10 +-
 net/sched/cls_bpf.c                                |  18 ++-
 net/sched/cls_u32.c                                |   3 +
 net/sched/sch_api.c                                |  24 ++-
 net/tls/tls_sw.c                                   |   5 +
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 ++--
 security/security.c                                |   9 +-
 security/selinux/ss/policydb.c                     |  31 ++++
 security/selinux/ss/services.c                     |  28 +++-
 sound/soc/codecs/cs35l41-lib.c                     |   2 +-
 sound/soc/codecs/cs35l45-tables.c                  |  32 ++--
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   8 +-
 sound/soc/codecs/tas2562.c                         |   9 +-
 sound/soc/intel/common/sof-function-topology-lib.c |   7 +-
 sound/soc/sof/ipc4-topology.c                      |  33 +++++
 sound/soc/sof/sof-audio.c                          |   9 +-
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 .../selftests/bpf/progs/verifier_linked_scalars.c  | 112 ++++++++++++++
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   4 +-
 233 files changed, 2826 insertions(+), 1496 deletions(-)

Read the cover letter in its thread